Static task
static1
Behavioral task
behavioral1
Sample
41a3b7485a73d2ddd83f35af707411b9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
41a3b7485a73d2ddd83f35af707411b9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
41a3b7485a73d2ddd83f35af707411b9_JaffaCakes118
-
Size
26KB
-
MD5
41a3b7485a73d2ddd83f35af707411b9
-
SHA1
8b16aa711ad578389b5261efff0ef9bb5a61bb2e
-
SHA256
dc38286de97f33d2b288c0949425a5d59a8558c55be088ae2b3815cd85f176d7
-
SHA512
dc7239f5d1de53dec5b02f02bc0762e1d58a248db72c5ddfa82b3a1566af20437a7d322437727640054f3376b8efff3d8e375315d73b8015297ec92fdd736692
-
SSDEEP
384:q/GRhOHhCXuVP3fXg1reXRWNlgBtc22iJy741xb1p36pI8d1o8W256sHLCJ:3QCg3fw1rehWNv23JnbupTDD5XWJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41a3b7485a73d2ddd83f35af707411b9_JaffaCakes118
Files
-
41a3b7485a73d2ddd83f35af707411b9_JaffaCakes118.exe windows:4 windows x86 arch:x86
1cda790878996bb151bd68e287de0088
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMailslotA
WriteConsoleInputW
Thread32First
GetComPlusPackageInstallStatus
GetDateFormatA
FormatMessageW
RaiseException
GetLogicalDrives
SetEnvironmentVariableW
ScrollConsoleScreenBufferW
user32
OffsetRect
SetDeskWallpaper
DdeInitializeA
DefWindowProcA
GetUpdateRgn
GetForegroundWindow
GetGuiResources
CallMsgFilterA
DrawMenuBarTemp
GetClipCursor
SetClipboardViewer
Sections
.text Size: 23KB - Virtual size: 28KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ